Bruteforce a JWT against a list of passwords
☆84Sep 16, 2017Updated 9 years ago
Alternatives and similar repositories for jwt-secret
Users that are interested in jwt-secret are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool for searching a Git repository for interesting content☆107Dec 18, 2023Updated 2 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆134Feb 19, 2021Updated 5 years ago
- A curated list of amazingly awesome OSINT☆19Oct 7, 2025Updated last year
- unicode abnormalizer to takes a unicode string and abnormalizes it by character replacment☆26Jun 27, 2020Updated 6 years ago
- Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin☆45Mar 13, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A extension for collecting parameters☆23Oct 25, 2020Updated 6 years ago
- This extension provides a central location for viewing all GraphQL requests/responses within a Burp project. It provides a clean UI that …☆16Feb 24, 2022Updated 4 years ago
- Dump all available paths and/or endpoints on WADL file.☆97Nov 24, 2025Updated 11 months ago
- gorobots - robots.txt recon & path discovery in Go. Structured parsing, 29-category sensitivity classification, concurrent path probing, …☆19Apr 10, 2026Updated 6 months ago
- Use grepaddr to extract (grep) all kinds of addresses from stdin like URLs (incl. IPv4/IPv6), IP addresses & ranges (IPv4/IPv6), e-mail a…☆68Aug 7, 2023Updated 3 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- #JavascriptRecon #bugbounty☆20Aug 18, 2021Updated 5 years ago
- Virtual host wordlist☆54Jan 12, 2021Updated 5 years ago
- services-names-wordlist☆88Oct 31, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoCs and technical analysis of three vulnerabilities found on Cisco AnyConnect for Windows: CVE-2020-3433, CVE-2020-3434 and CVE-2020-343…☆41Sep 25, 2020Updated 6 years ago
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆48Jul 20, 2022Updated 4 years ago
- IIS shortname scanner written in Go☆360Mar 25, 2023Updated 3 years ago
- ☆29Jul 14, 2023Updated 3 years ago
- ☆56Sep 2, 2020Updated 6 years ago
- You can read the writeup on this script here☆190May 9, 2026Updated 5 months ago
- A golang utility to spider through a website searching for additional links.☆346Nov 7, 2020Updated 5 years ago
- Find alive host from dumped subdomains, huge domain list , alive subdomains☆26Mar 29, 2021Updated 5 years ago
- ☆11May 28, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Extract endpoints marked as disallow in robots files to generate wordlists.☆60Mar 2, 2022Updated 4 years ago
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- One liner regex match to search inside JS files, using curl and grep!☆28Dec 26, 2021Updated 4 years ago
- A tool to find subdomains or domains from passive sources.☆113Jan 20, 2021Updated 5 years ago
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- A Go scraper that validates security.txt files and outputs them in the disclose.io JSON format.☆23Aug 22, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Deploy a Private Burpsuite Collaborator using boto3 Python Library☆57Feb 20, 2020Updated 6 years ago
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆297Jun 3, 2024Updated 2 years ago
- Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quo…☆109Sep 10, 2023Updated 3 years ago
- I will share my bug bounty tips here☆32Mar 6, 2023Updated 3 years ago
- Tool to identify and exploit timing attacks☆11Jul 7, 2016Updated 10 years ago
- A Go implementation of dirsearch.☆41Mar 10, 2019Updated 7 years ago
- ☆43Jun 23, 2020Updated 6 years ago